Quick Reference · containers & images

docker cli cheat sheet

Every command moves software through five places: a Dockerfile, a built image, a running container, a registry (Docker Hub), and shared infrastructure (volumes, networks, Compose). Learn the map once and the commands stop being a list to memorize.

Dockerfile / build image container registry volumes / network / compose destructive ★ most common

Distilled & cross-checked across: docs.docker.com · docker.com/resources/cli-cheat-sheet · buddy.works · devopscycle.com · github.com/wsargent/docker-cheat-sheet · dockerlabs.collabnix.com

The five areas & the commands that move work between them

01Build & Manage ImagesDockerfile → image

docker build -t <name>:<tag> .★
Build an image from a Dockerfile in this dir.
docker build --no-cache -t <name> .
Force a clean rebuild, ignoring cached layers.
docker images★
List all local images.
docker tag <image> user/repo:tag
Add a tag/alias to an existing image.
docker history <image>
Show the layers that built an image.
docker rmi <image>removes
Delete a local image.
docker image prune -aremoves
Delete all unused/dangling images.

02Run Containersimage → container

docker run <image>★
Create + start a container from an image.
docker run -d <image>★
Run detached, in the background.
docker run -p 8080:80 <image>★
Map host port → container port.
docker run --name <name> <image>
Give the container a friendly name.
docker run -it <image> sh★
Interactive shell inside a new container.
docker run --rm <image>
Auto-remove the container once it exits.
docker run -v <host>:<container> <image>
Mount a host path/volume into the container.
docker run -e NAME=val <image>
Pass an environment variable.

03Inspect & Managethe daily loop

docker ps★
List running containers.
docker ps -a★
List all containers, running or stopped.
docker logs -f <container>★
Stream a container's logs.
docker exec -it <container> sh★
Open a shell inside a running container.
docker inspect <container>
Full JSON config & state of an object.
docker stats
Live CPU/memory/network usage.
docker top <container>
Processes running inside a container.
docker cp <container>:<path> <dest>
Copy files between host & container.
docker rename <old> <new>
Rename an existing container.

04Stop & Removeend the lifecycle

docker stop <container>★
Gracefully stop (SIGTERM, then SIGKILL).
docker start <container>★
Restart a stopped container.
docker restart <container>
Stop, then start again.
docker kill <container>force
Immediate SIGKILL, no graceful shutdown.
docker rm <container>★removes
Delete a stopped container.
docker rm -f <container>force
Stop + remove in one step.
docker rm $(docker ps -aq)removes
Remove every stopped/running container.

05Registry & Docker Hubshare images

docker login★
Authenticate this CLI to Docker Hub.
docker pull <image>★
Download an image from a registry.
docker push user/repo:tag★
Upload a tagged image to a registry.
docker search <term>
Search Docker Hub for images.
docker logout
End the authenticated CLI session.

06Volumespersist data

docker volume create <name>
Create a named, managed volume.
docker volume ls★
List volumes on this host.
docker volume inspect <name>
Show mountpoint & metadata.
docker volume rm <name>removes
Delete a volume (data is destroyed).
docker volume pruneremoves
Delete all unused volumes.

07Networkscontainer ↔ container

docker network ls★
List networks (bridge, host, none, …).
docker network create <name>
Create a user-defined bridge network.
docker network connect <net> <container>
Attach a running container to a network.
docker network inspect <name>
Show connected containers & subnet.
docker network rm <name>removes
Delete a network.

08Docker Composemulti-container apps

docker compose up★
Build (if needed) & start every service.
docker compose up -d★
Start the whole stack in the background.
docker compose ps
List this project's running services.
docker compose logs -f
Stream logs from all services.
docker compose exec <svc> sh
Shell into one running service.
docker compose down★removes
Stop & remove containers, networks.
docker compose down -vremoves
Same, plus delete named volumes.

09System & Cleanupreclaim disk space

docker info
System-wide Docker daemon details.
docker system df
Disk usage by images/containers/volumes.
docker system prune★removes
Clean stopped containers, dangling images, unused networks.
docker system prune -a --volumesdestroys
Aggressive clean — also drops volumes.
docker context ls
List configured Docker daemon contexts.

10Help & Infoeverywhere

docker --help★
List top-level commands.
docker <cmd> --help★
Flags & usage for any subcommand.
docker version
Client + server (Engine) versions.
docker events
Real-time stream of daemon events.

★Refer to an Objectanywhere you see <container>/<image>

webapp
a --name you assigned
nginx:1.27
image repo + tag
3e887ab21f9c
a container/image ID (short is fine)
$(docker ps -aq)
every container ID, for batch ops
latest
default tag if none is given

Container lifecycle & core concepts

Four shapes worth holding in your head — based on the reference diagrams used across the official Docker docs and the community cheat sheets.

Container state machine

A container moves through a small set of states; most commands are just verbs that flip it from one box to the next.

Image layers

Each Dockerfile instruction adds a read-only layer. A running container adds one thin writable layer on top.

Volumes vs. bind mounts

Both persist data outside the container's writable layer — but who manages the storage differs.

Default network drivers

Most setups never leave bridge — but knowing the other two saves a debugging session someday.

Dockerfile instructions

The vocabulary the docker build command reads, top to bottom, to assemble an image.

FROMbase image to build on top of

RUNexecute a command, bakes a new layer

COPYcopy files from build context into the image

ADDlike COPY, plus URL/tar-extract support

WORKDIRset the working directory for later instructions

ENVset an environment variable at build & run time

ARGbuild-time-only variable

EXPOSEdocument the port the app listens on

VOLUMEdeclare a mount point for persistent data

CMDdefault command when container starts (overridable)

ENTRYPOINTfixed executable; CMD becomes its arguments

USERswitch to a non-root user for later steps

Worth memorizing

pull → run → ps → stop → rmthe everyday workflow, start to finish

CMD vs ENTRYPOINTCMD is overridable defaults; ENTRYPOINT is fixed

-d vs -itdetached background vs. attached interactive

image ≠ containerimage is the template; container is a running copy

stop vs killstop is graceful (SIGTERM); kill is immediate (SIGKILL)

volume vs bind mountDocker manages volumes; you manage bind-mount paths

rm -fstops a running container before removing it — no confirm

system prune -a --volumesnukes everything unused — read the prompt first

Docker CLI cheat sheet · synthesized from the official references of docs.docker.com, docker.com/resources/cli-cheat-sheet, buddy.works, devopscycle.com, github.com/wsargent/docker-cheat-sheet, and dockerlabs.collabnix.com.
Commands shown for Docker Engine ≈ 24+ · modern docker compose (v2, no hyphen) preferred over the legacy docker-compose binary.